12
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
8.2
Safety Function Requirements
This section lists the Safety Function Requirements that
specify what safety relevant functionality is to be performed
for implementation of the safety integrity function and also
to maintain the desired level of safety integrity. These
requirements may also rule out particular functionality for
SIF usage that could lead to designs that are difficult to vali-
date for deterministic performance or safety integrity.
Safety Function Requirement
Upon application of power and successful initialization, the Eclipse Model 706
shall
enter the Normal Mode or
Faulted Mode of operation.
Upon application of power and successful initialization, the Eclipse Model 706
shall
enter the Normal Mode
operation within 6 seconds.
Upon application of power and successful initialization, the Eclipse Model 706
shall
enter the Faulted Mode of
operation in less than 29 seconds.
The Eclipse Model 706
shall
transition to the Faulted Mode from the Normal Mode within the Diagnostic Test
Interval after a diagnostic event occurs. The safety function will respond to a change from the user’s process
within the safety (function) response time.
The Eclipse Model 706
shall
transition to the Faulted Mode from the Normal Mode within the Diagnostic Test
Interval of 15 seconds after a diagnostic event occurs.
The safety function output of the Eclipse Model 706
shall
respond to a change from the user’s process within
the safety (function) response time of 3 seconds assuming Damping is set to 0.
The Eclipse Model 706
may
leave the Faulted Mode when all diagnostics are clear.
8.3
Safety User Programming and
Configuration Requirements
The Safety User Programming and Configuration
Requirements provide the requirements for field configura-
tion of the device required to create and maintain SIF con-
figurations. These requirements should provide the neces-
sary guidance to ensure that the engineering environment
will meet both the intended market and safety certification
requirements, along with guidance and user restrictions doc-
umented in the safety manual.
Safety User Programming Requirement
Setup, configuration, and maintenance functionality for the Eclipse Model 706
shall
be supported by the
non-interfering HART communications interface.
Setup, configuration and maintenance functionality for the Eclipse Model 706
shall
be supported by the optional
Local User Interface.
